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DETAILED ACTION 

Applicant amends claims 1 , 4 & 1 0 and adds claims 1 9 & 20. 
Claims 1-20 are presented for examination. 

Response to Arguments 

Applicant's arguments with respect to claims 1-20 have been considered but are 
moot in view of the new ground(s) of rejection. 

The fact that the Examiner may not have specifically responded to any particular 
arguments made by Applicant and Applicant's Representative, should not be construed 
as indicating Examiner's agreement therewith. 

Claim Rejections - 35 USC § 103 
The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or deschbed as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

1 . Claims 1 and 3-20 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Ferchichi et al. (WO 01/60013 A1), hereinafter referred to as Ferchichi, in view of 
Barlow et al (U.S. Pat 6038551 A), hereinafter referred to as Barlow, in further view of 
Gupta et al. (U.S. Pat Pub 2001/0037469 Al), hereinafter referred to as Gupta. 

Re claim 1 : Ferchichi teaches a method for centralizing administration of user 
registration information across networks (Abstract: lines 1-3), characterized by: 
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communicating witli an Internet Content Provider (iCP) [single sign-on module] 
by logging in Internet networks through a computer (page 6, lines 11-14; page 20, lines 
1-12), and 

accessing, by the ICP, a user-login-identification means which can access an 
online terminal (page 12, lines 4-22); 

wherein the ICP adds an interface module in a login web page and the ICP is 
authenticated to access the user-login-identification means via the interface module 
(page 6, lines 11-14 & lines 16-24; page 17, lines 5-7), and 

the ICP also provides an administration/drive module monitoring access of the 
user-login-identification means to set up a connection and hang up the connection for 
the user-login-identification means in the login web page (page 6, lines 19-26); 

However, Barlow teaches an identification (ID) number is provided to the user- 
login-identification means (col 14, lines 21-30), and 

user's login identification information is stored in the user-login-identification 
means (col 8, lines 22-27); 

ICP access authentication information is stored in the user-login-identification 
means to verify whether the accessing ICP is authorized to access; if the accessing ICP 
passed the verification, its access is permitted, otherwise the access is not permitted; 
wherein the ICP is permitted to access the user-login-identification means only if the 
ICP is authenticated, when the user-login-identification means is activated (col 15, lines 
27-38). 
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It would have been obvious to one of ordinary skill in the art at the time the 
invention was made to have modified the teachings of Ferchichi with the teachings of 
Barlow, for the purpose of validating user credentials stored in a portable media, e.g. a 
token, as is known in the art. 

Gupta teaches authenticating comprises obtaining an authentication file from the 
user-login-identiflcatlon means via the interface module, transmitting the authentication 
file to the administration/drive module (1|35; 1|52), decrypting the authentication file by 
the administration/drive module, and accessing the user-login-identification means 
ICP (1174, 1186). 

It would have been obvious to one of ordinary skill in the art at the time the 
invention was made to have modified the teachings of Ferchichi and Barlow with the 
teachings of Gupta, to securely transmit an authentication file for the verifying authority 
for the purposes of validating the client and verifying a user's cookie associated with the 
client. One would have also have been motivated to securely transmit the user's cookie 
for the purposes of preventing man-in-the-middle attacks. 

Re claim 3 : The combination of Ferchichi, Barlow and Gupta teaches the ICP 
accessing the user-login-identification means includes checking the user ID 
identification information stored in the user-login-identification means, or generating the 
user ID identification information in the user-login-identification means (Ferchichi: page 
6, lines 24-27 and page 11, lines 19-22). 

Re claim 4 : The combination of Ferchichi, Barlow and Gupta teaches wherein 
accessing the user-login-identification means by the ICP comprises: 
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reading the information stored in the user-login-identification means by the ICP, if 
login Identification Information Is obtained, returning the login identification Information 
to the web page and determining whether a login-submit or an automatic submit & login 
should be performed according to user's setup by the Interface module; and If the login 
identification information is not obtained, informing the web page that the login 
identification information is not available and storing generated login identification 
Information In the user-log In-ldentlflcatlon means by the Interface module (FerchlchI: 
page 6, lines 19-26; page 11, lines 19-26; page 12, lines 4-14). 

Re claim 5 : The combination of Ferchichi, Barlow and Gupta teaches an ICP web 
page is provided with a registration Information window (Gupta: 1|73); the ICP invokes 
parameters of the Interface module and simultaneously saves several sets of 
registration Information of a same web page or saves the last set of registration 
information in the user-login-identification means (Gupta: 1|74, lines 16-28; 1|78, lines 
14-21), and the registration information can also be displayed on the ICP web page 
(Gupta: 1136, lines 14-16) 

Re claim 6 : The combination of FerchlchI, Barlow and Gupta teaches an ICP web 
page is provided with a registration information window (Gupta: 1|73); the ICP accesses 
the user-login-identification means via the interface module (page 6, lines 19-22) and 
verifies the login identification information provided by the ICP web page (Ferchichi: Fig 
3, elts 302, 304 & 316; H79 and 1|81), and stores new login identification Information In 
the user-log In-ldentlflcatlon means to overwrite original login identification Information 
(FerchlchI: page 45, claim 39 teaches replacing a secret on the smart-card), and 
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transfers relating information to the ICP web page (Gupta: ^77); the information is 
displayed on the web page after being obtained (Gupta: 1|77). 

Re claim 7 : The combination of Ferchichi, Barlow and Gupta teaches the ICP 
web page is provided with a plurality of window links of the registration information 
(Gupta: lf73); the ICP reads the user-logln-identification Information stored in the user- 
login-identificatlon means and verifies the login identification information provided by the 
ICP web page; if positive, the login identification information is directly read out and the 
relating information is transferred to the ICP web page (Gupta: 1|73, 1|77); the 
information is displayed on the web page after being obtained (Gupta: 1|77). If 
verification appears negative, the login identification information is stored In the user- 
login-identification means (Ferchichi and Gupta teach that if credentials provided by a 
combination of the user or the smart-card are invalid, access is denied; ergo, the user- 
logln-identlflcatlon means Is unaltered.) 

Re claim 8 : The combination of Ferchichi, Barlow and Gupta further teaches a 
login verification serving party for implementing prior authentication to the ICP and 
obtaining guide information of the user-login-identification means (Gupta: Fig 3, elt 304; 
prior to authorizing the client session, see steps 310 and 316 of Fig 3, elt 304, a prior 
authentication method, is preformed). 

Re claim 9 : The combination of Ferchichi, Barlow and Gupta further teaches the 
ICP is connected with a login verification serving party [Gupta: Fig 2, elt 204] which 
transmits a code for accessing the user-login-identification means to the ICP, and the 
ICP adds the login identification information in the login web page according to the 
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code, and the interface module transmits the ICP information to the login verification 
serving party for verification; if the ICP information passed the verification, the ICP is 
permitted to access the user-login-identification means, wherein the user activates the 
user-login-identification means by using a password, and then the ICP accesses the 
login verification serving party for an authentication via the interface module; if the 
authentication is valid, the ICP can operate the user-login-identification means via the 
interface module and the actuating password used by the user is provided by the login 
verification serving party or preset in the means (Ferchichi: page 6, lines 11 -26 and 
Gupta: 1|73, 1|77); the encryption files of the ICPs transmitted by the login verification 
serving party are different from each other (Ferchichi: page 8, lines 20-24 and Gupta: 
1186). 

Re claim 10 : Claim 10 is rejected under similar grounds as those stated in claim 

1 , supra. 

Re claim 1 1 : Claim 11 is rejected under similar grounds as those stated in claim 
9. Claim 1 1 is encompassed by claim 9. 

Re claim 12 : The combination of Ferchichi, Barlow and Gupta teaches 
information transmission between the computer and the user-login-identification means 
is processed with encryption or decryption (Ferchichi: Table on pages 14-15); the 
encryption includes protecting an encryption area by using the user's PIN code or 
utilizing RSA 512PKI key management encryption method (Ferchichi: Table on pages 
14-15). 
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Re claim 13 : The combination of Ferchichi, Barlow and Gupta teaches the user- 
login-identification means is also provided with a storage region for storing the 
information of the ICP itself (Ferchichi: page 3, lines 1-2). 

Re claim 14 : The combination of Ferchichi, Barlow and Gupta teaches the user- 
login-identification means is an external and portable memory means with a standard 
data interface, or a card-reader means or an ID identifying means thereof (Ferchichi: 
page 8, lines 8-1 1 ; page 1 1 , lines 23-26; page 22, lines 1 9-21 ). 

Re claim 15 : The combination of Ferchichi, Barlow and Gupta teaches the user- 
login-identification means is a USB storage device, a CF card, a MMC card, a SD card, 
a SMC card, an IBM Micro Drive card, a flash storage module or an IC card (Ferchichi: 
Abstract; page 1, lines 1-2). 

Re claim 16 : The combination of Ferchichi, Barlow and Gupta teaches the 
portable memory card-reader means is a CF card processor, a MMC card processor, a 
SD card processor, a SMC card processor, an IBM Micro Drive card processor or an IC 
card processor (Ferchichi: page 19, lines 6-14; page 33, lines 9-12). 

Re claim 17 : The combination of Ferchichi, Barlow and Gupta teaches the user- 
login-identification means is a computer peripheral (Ferchichi: Abstract: lines 1-3; page 
19, lines 6-14). 

Re claim 18 : The combination of Ferchichi, Barlow and Gupta teaches the user- 
login-identification means is a portable PDA, a music player or an electrical dictionary 
(Ferchichi: Abstract: lines 1-3; page 19, lines 6-14). 
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Re claim 19 : The combination of Ferchichi, Barlow and Gupta teaches the 
communicating with an ICP by logging in Internet networks through a computer 
comprises: 

communicating with two or more ICRs by logging in Internet networks through the 
computer (Ferchichi: page 19, lines 14-24 and page 20, lines 1-12; Gupta: Figure 2, 
elements 202 & 204). 

Re claim 20 : The combination of Ferchichi, Barlow and Gupta teaches two or 
more ICRs (Ferchichi: page 19, lines 14-24 and page 20, lines 1-12; Gupta: Figure 2, 
elements 202 & 204). 

2. Claims 2 is rejected under 35 U.S.C. 103(a) as being unpatentable over 
Ferchichi et al. (WO 01/60013 A1), hereinafter referred to as Ferchichi, in view of 
Barlow et al (U.S. Pat 6038551 A), hereinafter referred to as Barlow, in view of Gupta et 
al. (U.S. Pat Pub 2001/0037469 Al), hereinafter referred to as Gupta, in further view of 
Wu, Wei-Je (TW 480435), hereinafter referred to as Wu. 

Re claim 2 : The combination of Ferchichi, Gupta and Kawasaki teaches all the 
limitations of claim 1 as previously discussed and further teach the administration/drive 
module is used to automatically log in, in the case that the ICP accesses the user-login- 
identification means via the interface module and verifies the identification information. 

However, Wu teaches the administration/drive module is used to lead in and/or 
lead out data stored in the user-login-identification means so as to backup the data 
(Abstract). 
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It would have been obvious to one of ordinary skill in the art at the time the 
invention was made to have modified the teachings of Ferchichi, Gupta and Kawasaki 
with the teachings of Wu for the purpose of securing content stored on an original smart 
in the event that it is lost, damaged or becomes inaccessible to the user. 

Conclusion 

Examiner's Note: Examiner has cited particular columns and line numbers in the 
references applied to the claims above for the convenience of the applicant. Although 
the specified citations are representative of the teachings of the art and are applied to 
specific limitations within the individual claim, other passages and figures may apply as 
well. It is respectfully requested from the applicant in preparing responses to fully 
consider the references in entirety as potentially teaching all or part of the claimed 
invention, as well as the text of the passage taught by the prior art or disclosed by the 
examiner. 

In the case of amending the claimed invention. Applicant is respectfully 
requested to indicate the portion(s) of the specification which dictate(s) the structure 
relied on for proper interpretation and also to verify and ascertain the metes and bounds 
of the claimed invention. 

Applicant's amendment necessitated the new ground(s) of rejection presented in 
this Office action. Accordingly, THIS ACTION IS MADE FINAL. See MPEP 
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§ 706.07(a). Applicant is reminded of the extension of time policy as set forth in 37 
CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1 .136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the date of this final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to DARREN SCHWARTZ whose telephone number is 
(571)270-3850. The examiner can normally be reached on 7am-4pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Kim Vu can be reached on (571 )272-3859. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

ID. SJ 

Examiner, Art Unit 2435 
/Kimyen Vu/ 

Supervisory Patent Examiner, Art Unit 2435 



